Signature Detail
Short Name |
HTTP:STC:DL:OPENOFFICE-DOC |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
OpenOffice .doc File Remote Denial of Service |
Release Date |
2012/12/12 |
Update Number |
2210 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: OpenOffice .doc File Remote Denial of Service
This signature detects attempts to exploit a known vulnerability against OpenOffice. A successful attack can result in a denial-of-service condition.
Extended Description
OpenOffice is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue by enticing an unsuspecting victim to open a specially crafted '.doc' file. Successfully exploiting this issue will cause the application to crash, denying service to legitimate users. Attackers may also be able to run arbitrary code, but this has not been confirmed.
Affected Products
- OpenOffice 1.1.2
- OpenOffice 1.1.2-38.2.0.EL3
- OpenOffice 1.1.3
- OpenOffice 1.1.3 -9Sarge3
- OpenOffice 1.1.4
- OpenOffice 1.1.5
References
- BugTraq: 33383
- CVE: CVE-2009-0259